qomplement
Pass
Audited by Gen Agent Trust Hub on Jun 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Executes shell commands including
curl,jq, and a diagnostic toolzero doctor. - Evidence: The skill provides a troubleshooting command
zero doctor check-connectorand acurlusage example for performing authenticated API requests. - [EXTERNAL_DOWNLOADS]: Performs network requests to external endpoints to retrieve data and manage credentials.
- Evidence: Connects to
app.vm0.ai(vendor infrastructure) for connector setup andqomplement.comfor API operations. - [PROMPT_INJECTION]: Contains an attack surface for indirect prompt injection through the ingestion of external API data.
- Ingestion points: External API responses processed via the
curlcommand inSKILL.md. - Boundary markers: None present in the provided shell example.
- Capability inventory: Shell execution capabilities (
curl,jq). - Sanitization: No explicit sanitization or validation of API content is performed before processing.
Audit Metadata